docs(object-store): the proof follows the policy, not the bucket list #173

Merged

binjovi-bot merged 1 commit from sean/object-store-prefix-proofs into trunk

2026-09-10 02:11:38 +00:00

AGit

sean commented

2026-09-10 02:10:56 +00:00

Owner

The README said the converge's isolation proof was bucket-level; that sentence described the bug that failed the first converge of the prefix-scoped package identities on 2026-09-10. Binjovi sha-a98dbc136bf5 proves each grant at its own target. This release re-drives the converge. https://claude.ai/code/session_01KZoQin34jeyt6nDGqvJA76

sean added 1 commit

2026-09-10 02:10:57 +00:00

docs(object-store): the proof follows the policy, not the bucket list

binjovi/ci Binjovi completed the frozen plan

Details

76144f9d25

The README said the converge's isolation proof was bucket-level, "exactly
as it was on MinIO". That sentence described the bug: the thirteen package
identities are prefix-scoped, a key that may list only `workflows/zdns/`
refuses `mc ls workflows` by design, and the first converge of those
identities failed on exactly that (2026-09-10). Binjovi now proves each
grant at its own target, per verb, proves the root of a prefix-only bucket
as a denial, reads an exact key rather than writing one, and asks for no
read denial on a public bucket, which every principal can read.

This release also re-drives the converge: there is no retry for a
production target, and the corrected proof ships in the Binjovi release
that precedes this one.

Claude-Session: https://claude.ai/code/session_01KZoQin34jeyt6nDGqvJA76

binjovi-bot merged commit 76144f9d25 into trunk

2026-09-10 02:11:38 +00:00

No reviewers

No labels

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

sean/binjovi-plans!173

No description provided.

Rows
Columns